Why does Selective Export utility export more than specified Object Type in the filter?


Article ID: 141613


Updated On:


CA Identity Manager CA Identity Governance CA Identity Portal CA Identity Suite


When I tried to use the Selective Export Utility (SelectiveExportUtil) to export all Provisioning roles whose names contain a particular string, e.g. "BASIC", the resultant output seems to include other objects (screens, tasks, other roles, etc.).
I have run following command

 ./SelectiveExportUtil.sh -user imadmin -pwd ***** -url "http://caim-srv-01:8080/iam/im/ws/identityEnv" -exportTo basic.xml -filter filter.json 

with the filter.json contents as

    "criteria": [{
                "objectType": "PROVISIONING ROLE",
                "identifyAttributeName": "NAME",
                "criterion": [{
                        "operator": "CONTAINS",
                        "values": ["BASIC"]

The filter seems not functioning properly. Why does it happen like this?


Release : 14.3

Component : IdentityMinder(Identity Manager)


The Selective Export Utility is functioning as designed. When role definitions are exported, the filtered definitions and their dependencies are also exported. For example, if a Provisioning Role has owner as 'member of System Manager role', System Manager Admin Role will be exported, hence Admin Tasks belong to the role and their dependencies will also be exported. This is to keep data integrity.

In the above case, if filtered Provisioning Roles have imadmin as owner then the exported result will contain only those Provisioning Roles.

Additional Information

Selectively Export Role Definitions